Security Policy

Stripe Integration:

• All payments are processed securely through Stripe, a PCI DSS Level 1 certified payment processor
• We never store your full credit card details on our servers
• Payment information is encrypted in transit using TLS 1.2 or higher
• Stripe handles all payment card data in compliance with PCI DSS standards

Encryption Standards:

• All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher
• We use HTTPS for all web traffic to ensure secure communication
• Payment information is transmitted directly to Stripe using their secure APIs
• We implement secure session management and authentication

What We Store:

• We store only the last 4 digits of your payment method for identification purposes
• Payment method type (e.g., Visa, Mastercard) and expiration month/year
• Transaction history and payment records
• No full credit card numbers, CVV codes, or PINs are stored

We implement multiple layers of security:

• Server Security: Our servers are hosted on secure cloud infrastructure with regular security updates
• Access Controls: Limited access to payment data on a need-to-know basis
• Monitoring: Continuous monitoring for suspicious activity and unauthorized access
• Regular Audits: Periodic security assessments and vulnerability scans

Our security practices comply with:

• PCI DSS (Payment Card Industry Data Security Standard)
• Industry best practices for web application security
• Stripe's security requirements and guidelines